İçeriğe atla
Noroxi

HT Mega Addons for Elementor – Elementor Widgets & Template Builder

ht-mega-for-elementor · eklenti

HT Mega Addons for Elementor – Elementor Widgets & Template Builder için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

29 bilinen açık

1 kritik · 2 kayıt için istismar kodu yayımlanmış · son kayıt 14 Ağu 2025

Güvenlik açıkları

  • CVE-2023-37999

    WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

    Kritik 9.8

  • CVE-2024-38706

    WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

    Yüksek 8.8

  • CVE-2023-51529

    WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Yüksek 8.8

  • CVE-2023-6214

    HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products

    Yüksek 7.5

  • CVE-2024-32782

    WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

    Orta 6.5

  • CVE-2024-1974

    HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal

    Orta 6.5

  • CVE-2024-12599

    HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

    Orta 6.4

  • CVE-2023-50901

    WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)

    Orta 6.1

  • CVE-2025-54695

    WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability

    Orta 5.4

  • CVE-2025-1802

    HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    Orta 5.4

  • CVE-2025-1261

    HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget

    Orta 5.4

  • CVE-2024-12597

    HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css

    Orta 5.4

  • CVE-2024-5215

    HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    Orta 5.4

  • CVE-2024-5173

    HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings

    Orta 5.4

  • CVE-2024-4876

    HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Orta 5.4

  • CVE-2024-3990

    HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget

    Orta 5.4

  • CVE-2024-3989

    HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify

    Orta 5.4

  • CVE-2024-3308

    HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget

    Orta 5.4

  • CVE-2024-3307

    HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

    Orta 5.4

  • CVE-2024-2790

    HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ

    Orta 5.4

  • CVE-2024-2085

    HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'

    Orta 5.4

  • CVE-2024-30182

    WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2024-1421

    HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget

    Orta 5.4

  • CVE-2024-1397

    HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag

    Orta 5.4

  • CVE-2025-8401

    HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure

    Orta 4.3

  • CVE-2025-8151

    HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions

    Orta 4.3

  • CVE-2025-8068

    HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions

    Orta 4.3

  • CVE-2024-8910

    HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id

    Orta 4.3

  • CVE-2024-4875

    HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

    Orta 4.3

← Dizine dön